Linkproof – Multi-WAN Switch Cost-Effective and Agile WAN

LinkProof – Multi-WAN Switch Cost-Effective and Agile WAN. 24x7 Datacenter Access.

From maximizing productivity to ensuring continuity when disaster strikes, enterprises require uninterrupted access to websites, datacenters, remote locations and the Internet. LinkProof is a multi-WAN switch that lets you effortlessly add, manage and load-balance multiple ISP connections. Mix-and-match VPNs, private and public links, for back-up or in response to your growing bandwidth needs. It’s the only solution that maximizes the effectiveness of your WAN by bypassing bottlenecks and service-provider outages, managing bandwidth consumption, and letting you decide which links are used for which applications and when. The result? Flexibility to build a best-of-breed WAN solution that keeps costs down and keeps customers and users always connected to business-critical applications and websites.

LAN

LinkProof

Routers

Servers Firewalls LinkProof ISP 2 ISP 3 ISP 4 LinkProof LAN

Routers Routers

ISP 1 ISP 5

APSolute Application Delivery: Oracle: – SQL Server PeopleSoft Enterprise Apache – 9i Application Server – Microsoft Operations Manager RealNetworks RealSystem Servers Avaya (VoIP/SIP) – 10g Application Server – Mobile Information Server RSA SecureID Basic – E-Business Suite 11i – Internet Security and Acceleration Server SAP mySAP Business Suite BEA WebLogic – Collaboration Suite. – Visual Studio .NET Tivoli Access Manager Check Point VPN-1/FireWall-1 Trend Micro InterScan Citrix Metaframe Presentation Server Macromedia ColdFusion Siebel eBusiness Applications Sun iPlanet Servers HP OpenView Mercury Business Availability Center Netegrity SiteMinder webMethods Enterprise Services Platform Financial Interchange (FIX) Microsoft: Peer-to-Peer: Lotus/Domino Notes servers – Application Center – BitTorrent ...and many more IBM WebSphere – Commerce Server – eDonkey/eMule – Communication Server (MMS/VoIP/SIP) – FastTrack Instant Messaging: – Exchange Sever – Gnutella – MSN – Outlook Web Access – Kazaa – Yahoo – Windows Terminal Services – Exeem – AOL – SharePoint Portal Server – Poco – ICQ – Internet Information Services (IIS) – WinMX – Live Communications Server – WinNY Easily Scale And Manage Multiple WAN Links Expand your WAN or migrate from legacy lines to VPNs without risk. Create redundancy in your WAN or website without wasting resources. Increase bandwidth to datacenters or remote sites using cost-effective links without compromising CLASSIFIER & FLOW MANAGER up-time. LinkProof lets you seamlessly change and add any combination of IP-based WAN links, regardless of size, underlying transport method, service provider, or IP-address space, so you can focus on designing the WAN that’s right for you today, with the ﬂexibility you need to quickly and easily scale and adapt to tomorrow’s challenges.

LinkProof feature IT benefits The APSolute advantage Business benefits Application-smart · Decide which traffic is routed over · Classification Engine – processes all traffic (Packets/ · Increase business routing which WAN links based on any L4-7 Sessions) using any combination of: agility and reduce Physical Port, MAC Address, VLAN Tags, Source/Destination parameter or application-type. time-to-market for · Create flexible, scalable distributed IP address or network, Application information matching, Protocols – IP, TCP, UDP, etc, Content-based i.e. URL, cookie, applications, architectures and deploy client device, language, Regular expressions, Pattern WAN design and applications over existing matching. expansion. distributed architectures. · Flow Manager – enables sequential flows between network · Save on connectivity · Gradually migrate from legacy to segments to be defined per class of traffic. new WAN links or quickly fall back · Virtual Tunneling – hides IP-address changes while costs. if needed. automatically selecting WAN routes between any 2 · Prevent service- · Removes need for complex BGP LinkProofs. provider lock-in. routing configurations. · Reduce operational Supports multiple · New ISP links can be easily · SmartNAT – Automatically manages out-bound IP addressing costs. IP address-spaces integrated without the need to for seamless use of multiple WAN links. · Static NAT of internal resources to multiple addresses for and multiple link- coordinate IP addresses. · Mix-and-Match any type of IP- external accessibility using IP address. types from different · Integrated DNS - Enables external users to access internal terminated connectivity. ISPs resources via ALL available WAN links using URL. · Migrate from legacy to new links · Any IP-terminated link can be managed, e.g.: with ease. xDSL, Cable-modem, Frame Relay, IP-ATM, MPLS. Comprehensive · Simple device configuration. · APSolute Insite – network-wide GUI-based configuration, device, link, and · Application-aware policy set-up. monitoring and management console. · SNMP v1, v2, v3 (1213 MIB-II, 1643 Ethernet, 1493 Bridge) application-path · Health, performance and utilization monitoring and reporting. · Also supports: management – In-band Web-based management (HTTP or HTTPS) and · Network-wide application-level Command Line Interface (Telnet or SSH). visibility. – Out-of-band RS-232 Command Line Interface. · Integration into existing NMS. · Supports reporting via SNMP traps, syslog and email · Prevent lengthy and manual. messages. maintenance and troubleshooting. · HP OpenView plug-in. · Multi-device policy propagation. · Access Permissions management. · Graceful shutdown and recovery – Resources can be introduced or retired, and NHR and Firewall maintenance can be scheduled automatically with minimal operational effort and no user downtime. AVAILABILITY Ensure High Availability For Websites And Remote Access Has datacenter consolidation put all your application eggs in one basket? Perhaps you can’t afford even a minute downtime of your revenue generating website or corporate extranet. Maybe your disaster recovery plans require employees’

TRAFFIC MANAGEMENT unfettered access to the VPN gateway from their home computer. Smart business sense dictates that you manage the availability of your WAN and not rely solely on your service provider’s SLAs. LinkProof lets you introduce back-up links to support your business continuity strategy. Real-time health-checks of all available WAN paths ensure immediate failover to a functional link in the case of service outages, so that your data, applications and website are available 24x7.

LinkProof feature IT benefits The APSolute advantage Business benefits Real-time · Use cost-effective links for redun · Link availability based on user-defined full application/trans · Never lose business application smart dancy without suffering reliability action path. due to IT failures. penalty. · 5 Levels of Application Health Monitoring: health monitoring, – Physical Port · Prevent high failure detection – ARP, ICMP, Ping operational · Quickly Identify failures at any point and traffic – Application Level Monitoring: Citrix App Browsing, Citrix ICA, costs due to along the application or transaction redirection DNS, FTP, FIX, HTTP, IMAP4, LDAP, LDAPS, NNTP, POP3, RADIUS, lengthy and manual path and react proactively. RADIUS accounting, RTSP, SIP (TCP & UDP), SNMP, SSL troubleshooting. – Content Level Monitoring: · Automatically redirect in-bound and Web page check, Username & password, HTTP codes · Maintain faith and out-bound traffic to available WAN- verification, LDAP Search, File verification on FTP servers, reputation in paths to your datacenter or be Citrix Server check, SSL check and more. IT services with tween redundant sites. – User defined specific health checks. employees and · Bind multiple checks with and/or conditions for complete flexibility of dependencies checks. customers. Active-active or · Take full advantage of back-up · Passive back-up link health is monitored so that failover to · Effectively Support active-passive link’s bandwidth. “stale” link is prevented. business continuity link redundancy · Keep “dark” links available for im and disaster mediate fail-over. recovery plans. Active/passive · Prevent the introduction of a single · Proprietary ARP. · Protect your device redundancy point of failure in a high-availability · VRRP. investment. architecture. · Client Table Mirroring. · Lower solution TCO. · Active-Active device configuration. Highly reliable · Purpose built appliance- not PC based. platform · High MTBF. · Redundant power supply.

PERFORMANCE Reduce Response Times, Optimize Bandwidth Utilization And Reduce Costs Do more with the available resources and reduce your connectivity costs. LinkProof goes beyond managing scalability and redundancy, by optimizing the utilization of all your available WAN bandwidth through load-balancing, cost-based and

TRAFFIC SHAPING & ACCELERATION proximity routing and trafﬁc-shaping.

LinkProof feature IT benefits The APSolute advantage Business benefits Inbound and · Minimize access-time to websites · Patented Proximity Measurement combines latency detection · Maximize outbound proximity- and extranet applications hosted and hop count between the client's mouse "click" all the way infrastructure to the server content. based routing at the data-center. investment and · Minimize internal-users’ access · Proximity check-methods capable of passing through any router and firewall. time to external critical operational · Traffic is routed based on minimal dynamic proximity resources (“more Internet resources. measurements. · Reduce WAN traffic volume. with the same or the Inbound and · Dynamically make the most of · User-defined, priorities for load-balancing decisions based on same with less”). outbound link existing, available bandwidth based real-time measurements of: · Increase work-force on changing business and – Inbound/outbound bandwidth utilization load-balancing productivity. technical priorities. – Number of packets/sec – Number of concurrent sessions · Bypass temporary WAN · Save on monthly – User-defined SNMP (MIB) data connectivity costs. bottlenecks for both inbound and · Advanced persistency options. outbound traffic. · Cyclic (round-robin) and Hashing dispatch supported. · Delay WAN · Load-balances Firewalls behind it. expansion decisions. Bandwidth · Ensure top-priority and business- · Class based traffic shaping using CB-WFQ. · Guarantee Quality of management and critical applications always receive · Predefined Classes include over 40 common applications, and ToS or Diffserv bits. Service. traffic shaping the bandwidth they need. · Prevent non-critical Internet usage · User-defined classification per any Layer 4-7 parameter or content. · Protect latency-sensitive · Limit/guarantee bandwidth per class, user. applications from bottle-necks. · Control QoS levels. Cost-based routing · Take advantage of varying ISP · Automatically accommodates for any mix of rate models: rate structures to minimize monthly – Flat connectivity costs. – Per kbps – Bursting/Ladder Integrated Application-Level Security SECURITY Rampant virus or Denial of Service (DoS) attacks can impact the availability and performance of your business in the exact same way that a down link can, damaging your reputation and your bottom line. LinkProof provides a secure,

APPLICATION SECURITY single point of entry to your network, offering a first-line of defense against high-volume attacks aimed at crippling your network. DoS attacks, hacking attempts, worms and viruses are automatically detected, reported and mitigated before they can bring down your firewalls, servers and applications. Advanced intrusion prevention techniques protect against internal and external attacks including Trojans, Spyware, scanning attempts and protocol anomalies. LinkProof feature IT benefits The APSolute advantage Business benefits · Prevent attacks from bringing · 1000 attack signatures out-of-box · Ensure business DoS protection down firewalls, servers, · Security Update Service – provides automated emergency and continuity even weekly attack-filter updates, protecting against new databases and applications. during an attack. · Isolate attacks and prevent application vulnerabilities as they emerge. Integrated intrusion · Impressive record of First-to-Market signatures. · Protect reputation propagation throughout · Content, anomaly and behavioral based techniques. with business prevention the network. · Bandwidth Management clears network of malicious traffic to partners and

ensure availability for critical applications. customers. Advanced security · Real-time visibility into network- reporting wide security threats. · Logging and reporting of security events for forensics and compliance.

Technical Specifications Feature LinkProof 100/200/202 LinkProof 1000 LinkProof 3000 Nominal Throughput Up to 200Mbps wire-speed Up to 1Gbps wire-speed Up to 3Gbps wire-speed Non-Blocking Backplane 9.6 Gbps 19.2 Gbps 44 Gbps Layer 2 Switching Wire-speed Wire-speed Wire-Speed Simultaneous Sessions Unlimited Unlimited Unlimited Routing Protocols OSPF, RIP, RIP II OSPF, RIP, RIP II OSPF, RIP, RIP II RISC Processor Motorola PPC 750 266 MHz Motorola PPC 7410 500 MHz Motorola PPC 7457 1 Ghz RAM up to 256MB Up to 512MB Up to 1GB Gigabit/GBIC ports 0/0/2 5 1x10Gb + 7xGBICs 10/100 Ethernet Ports 8 16 16 1000Base-S/L/ZX Ports Full-duplex Gigabit Ethernet fiber Full-duplex Gigabit Ethernet fiber Full-duplex Gigabit Ethernet fiber 1000Base-SX (850 nm) · 62.5 micron MM fiber .2 to 275 m. · 62.5 micron MM fiber .2 to 275 m. · 62.5 micron MM fiber .2 to 275 m. Operating Distance · 50 micron MM fiber .2 to 550 m. · 50 micron MM fiber .2 to 550 m. · 50 micron MM fiber .2 to 550 m.

1000Base-LX/ZX N/A · LX: up to 10Km · LX: up to 10Km Operating Distance · ZX: up to 80Km · ZX: up to 80Km RS-232C Console · DB-9 serial connection · DB-9 serial connection · DB-9 serial connection · female DCE interface for out-of-band management · female DCE interface for out-of-band management · female DCE interface for out-of-band management Dimensions · 432mm x 475mm (17x18.7”) 19" EIA rack or · 432mm x 475mm (17x18.7”) 19" EIA rack or · 432mm x 475mm (17x18.7”) 19" EIA rack or standalone standalone standalone · Height: 44mm (1U) · Height: 44mm (1U) · Height: 44mm (1U) · Weight: 3.85 kg (8.5 lbs) · Weight: 5.3 kg (11.7 lbs) · Weight: 7.0 kg (15.4 lbs) Environmental · Operating Temperature: 0-40º C · Operating Temperature: 0-40º C · Operating Temperature: 0-40ºC · Humidity (non-condensing): 5-95% · Humidity (non-condensing): 5-95% · Humidity (non-condensing): 5-95% Power · Auto-range supply: 100-250V or · Auto-range supply: 100-250V or · Auto-range supply: single or 38-72v DC 50-60Hz 38-72v DC 50-60Hz dual 100-250V or 38-72v DC 50-60Hz · Power Consumption: 35 Watt · Power Consumption: 44 Watt · Power Consumption: 108 Watt · Heat Dissipation: 119.5 BTU/h · Heat Dissipation: 150.3 BTU/h · Heat Dissipation: 368.7 BTU/h Certiﬁcations · Safety: EN 60950; UL 1950, CSA 22.2 No 950 · Safety: EN 60950; UL 1950, CSA 22.2 No 950 · Safety: EN 60950; UL 1950, CSA 22.2 No 950 · EMI: EN 55022 Class A, EN 50024 FCC, Part 15B · EMI: EN 55022 Class B, EN 50024 FCC, Part 15B · EMI: EN 55022 Class A, EN 50024 FCC, Part 15B Class A Class B Class A · CE, CUL, VCCI · CE, CUL, VCCI · CE, CUL, VCCI

Radware’s APSolute Product Family Over 3,000 enterprises and carriers worldwide use Radware application-smart switches to drive business productivity and improve proﬁtability by adding critical application intelligence to their IP infrastructure, making networks more responsive to speciﬁc business processes. Radware’s APSolute product family provides the most complete set of application front-end, remote access and security capabilities for application-smart networking to ensure faster, more reliable and secure business transactions. Certainty Support Radware offers technical support for all of its products through the Certainty Support Program. Each level of the Certainty Support Program consists of four elements - phone support, software updates, hardware maintenance, and on-site support. To learn more about how Radware application delivery solutions can enable you to get the most of your investments in IT infrastructure and people email us at [email protected], or go to www.radware.com

Product speciﬁcations subject to change without notice. Copyright Radware Ltd. 2006. All Rights Reserved. The copyright and all intellectual property rights in this article belong to Radware Ltd. It is strictly forbidden to copy, multiply, reproduce or otherwise use this article or any part thereof in any way shape of form without the prior written consent of Radware Ltd. [email protected] | www.radware.com